Information about data protection MyRiverty Portal

Data protection information on our Riverty payment methods such as purchase on invoice (hereinafter referred to as "Product Data Protection Information") can be found under this link.

Valid from: 30.03.2023

1. Who is responsible for processing my data?

Riverty GmbH, Gütersloher Straße 123, 33415 Verl, Germany (hereinafter 'Riverty', 'we', 'us') is responsible for processing your data. You can reach our data protection officer by post at the above address marked "To the data protection officer" or by e-mail at privacy@riverty.nl.

2 What data is processed for what purposes?

2.1 access data; data processing when using the MyRiverty website

When you use the MyRiverty website or the Riverty Online Services, the following data and information are automatically sent to our server: your IP address, details about the content you have requested and about your usage behaviour (e.g. which sections (FAQs, contact form etc.) you have viewed), the content you have entered into the MyRiverty website (e.g. keywords, login details, ratings, form entries, click details), date and time of access, details about the internet browser you are using, the duration of your visit and the page you previously visited from which you accessed our website. These data are described below as "access data" and are processed for the following purposes:

2.2 Further data and data processing for logged-in participants

With your login, in addition to the access data (see section 2.1), we also process data about your purchases, your chosen payment methods (e.g. staggered payment, postpayment), information on the basis of the Money Laundering and Terrorist Financing Prevention Act (Wwft) and, where applicable, optional entries (e.g. entries in the chatbot, in the contact form, in the evaluation form, in the identification or signing process, in the analysis process of your bank account) for the following purposes:

3. Provision of the MyRiverty website and Riverty Online Services

3.1 Provision of the MyRiverty website

When you use the MyRiverty website, we process the access data that accumulates in the process in order to technically provide you with the called content and functions. The legal basis for the corresponding processing of your access data is Art. 6 (1) (b) of the GDPR.

3.2 Riverty Online Services for logged-in participants

After you have logged in, all Riverty Online Services offered by us are available to you via the MyRiverty website. Your login details are: your email address. Alternatively, you can use your email address and a password. Your data collected during your use of the MyRiverty website and the Riverty Online Services (see paragraph 2) will be processed in order to provide you with the Riverty Online Services. This includes for example:

4. Ensuring technical safety

The access data generated during the use of the MyRiverty website is stored for a short time in the log files (hereinafter "server log files") of our servers. The server log files are stored separately from your other data. It is therefore not possible for us to draw any direct conclusions about you from the server logs. At the latest after seven days the server logs are completely anonymized by truncating the IP address so that a personal reference is definitely excluded. The above-mentioned processing of access data takes place on the basis of Art. 6, Paragraph 1, Section f of the GDPR for the necessary guarantee of technical security, in particular for the prevention of attempted attacks and fraud on our servers, as well as for troubleshooting purposes.

5. Web analysis and range measurement

As part of our web analytics, we use so-called tracking tools to evaluate access data to find out how the MyRiverty website or our Riverty Online Services are used (reach measurement). The MyRiverty website also uses identification cookies ("cookies") for this purpose. Cookies are small text files that are stored by your internet browser. The cookies we use contain a randomly generated string of characters which is used by our Riverty app as identification on subsequent page views. This allows us to recognize whether you have already visited our Riverty app and what content and functions you have access to. The identification function itself does not contain any personal information. For example, we learn which offers and content are particularly popular, how long and at what times the MyRiverty website or the Riverty Online Services are particularly frequently used, from which regions (down to city level) the MyRiverty website or offers are accessed, and which browsers and devices our users use. For this purpose we use technologies on the MyRiverty website to create pseudonymous user profiles in order to perform reach measurements as well as statistical analyses and to optimize and design our offers according to needs.

The legal basis for performing the distance measurement is art. 6, paragraph 1, sub f GDPR, based on our legitimate interest in the statistical analysis and needs-based design of the MyRiverty website and the Riverty Online Services as described above.

The access data and usage profiles stored for the purpose of web analysis and range measurement are generally deleted or anonymized by us after one year.

Cookies that are not absolutely necessary for the functioning of the MyRiverty website can be deactivated via the Consent Management Platform. In this case, your access data will no longer be used for the purposes described above in section 5 and below in section 5.2.

5.1 Permission management platform

We use the Consent Management Platform from Usercentrics, Sendlinger Straße 7, 80331 Munich, Germany (CMP). The CMP supports us in the transparent presentation of data processing and enables us to store and retrieve the respective data processing, regardless of whether the user has given consent or not. Usercentrics processes the following data for the following purposes (as contractor):

Data processing purposes

Processed data

Legal basis

Storage periodProof of revocation of previously given consent is retained for three years from the end of the year in which the consent was revoked. The retention is based on our liability according to Art. 5 paragraph 2 GDPR and the regular limitation periods.

5.2 Tracking tools

We use the tracking tools of the following service providers for data processing within the framework of the web analysis described in Section 5. Unless stated otherwise, these service providers process personal data exclusively on our behalf and not for their own purposes (i.e. they are called processors). To the extent that these service providers process your data outside of the European Union, this may result in your data being transferred to a country that does not guarantee the same data protection standard as the European Union. In this case we will ensure that the service providers guarantee an equivalent level of data protection by contract or otherwise. You can request a copy of these guarantees using the contact details set out in Section 1.

Google Ireland Limited

Riverty Online Services uses the Google Analytics for Firebase ("Firebase") tool. Firebase is an analytics tool provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We use Firebase to collect access data and create pseudonymous usage profiles. Firebase also allows us to record in the pseudonymous usage profiles whether there are any problems or crashes when using our app. Furthermore, we use Firebase to play out new designs in the app to a small subset of users using so-called A/B testing. By comparing the pseudonymous user profiles, we can then see to what extent a new design affects the use of the app. The pseudonymous usage profiles created by Firebase will not be merged with your other data stored by Google on our behalf. In addition, we have agreed the European Commission's model contractual clauses with Google for this case.

6. Advertisements and individual offers

We use your contact details to send you advertisements by post, email, MMS, SMS or via the Riverty app about other Riverty products, such as installment payments ("Riverty Flex") or monthly billing. You will receive advertisements by email, MMS or SMS, even without your explicit consent, if we have received your email address or phone number in connection with the use of our services and the products/services advertised by us are similar to the products/services you have already used with us in the past. You can object at any time to this use of your contact details for advertising purposes by sending an e-mail to privacy@riverty.nl. This does not involve any additional costs for you other than the transmission costs according to the basic rates.

In addition, at the end of each e-mail, MMS or SMS you are given the opportunity to object to the further use of your e-mail address or telephone number by us for the above-mentioned purpose (advertising of comparable goods and services) in the future.

7. Other service providers

To the extent we use service providers other than those mentioned in this data protection statement to operate the MyRiverty website or our Riverty Online services (order processors, e.g. data centres, technical service providers), they are only granted access to your data to the extent and for the period necessary in each case for the provision of the respective services. If these service providers process your data outside the European Union, this may result in your data being transferred to a country that does not guarantee the same data protection standard as the European Union. In this case we will ensure that the service providers guarantee an equivalent level of data protection by contract or otherwise. You can request a copy of these guarantees using the contact details in section 1.

8. What rights do I have regarding my personal data?

You have the right to obtain information about the personal data that we hold about you at any time. If data about you are incorrect or out of date, you have the right to request that they be corrected. You also have the right to request the deletion or restriction of the processing of your data in accordance with Art. 17 or 18 of the GDPR.Information about your right to complain can be found in section 4 and section 7 of the Riverty Privacy Statement (https://documents.riverty.com/privacy_statement/checkout/nl_en). You have the right to receive an electronic copy of your data (right to data portability).

Insofar as we do not process the data for advertising purposes on the basis of Art. 6 par. 1 lit. f GDPR, you can object to the processing in accordance with Art. 21 par. 1 GDPR for reasons arising from your specific situation. However, we cannot always comply with this, for example, if legal provisions require us to process. If you wish to exercise your rights, in particular your right of revocation and objection, or if you have general questions about data protection in relation to the MyRiverty website or the Riverty Online Services, you can contact us at any time at customercare@riverty.nl or our data protection officer (see paragraph 1).

You also have the right to contact and lodge a complaint with a data protection authority. The authority responsible for us is the Dutch Data Protection Authority (tel:088-1805250, https://autoriteitpersoonsgegevens.nl/nl/meldingsformulier-klachten). You can also contact the data protection authority responsible for your place of residence, which will then forward your request.



Download PDF